Security Misconfiguration
Medium · Configuration · OWASP A05:2021 · CWE-16
Description
Insecure defaults, verbose errors, open storage.
Root cause
Missing hardening and review.
Impact
Information disclosure to full compromise.
Detection
Config scanners, CSPM, CIS benchmarks.
Mitigation
Hardening baselines, automated config checks.
Secure coding
Infrastructure as code with policy checks.
Safe lab example
Prowler on your own sandbox cloud account
Practise related skills in Labs or deepen on Academy library.